Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Enterprise 10.0.1, 9.2.10 and 2 more versions Clear all filters
TI-2025-14681 CVE-2025-20388 · GHSA-c3c6-ggqg-7crv

Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise

Priority LOW 14

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a user who holds a role that contains the high privilege capabili…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00375 Published 2025-12-03 Fixed in 10.0.1, 9.4.6 +5 CWE-918
TI-2025-14677 CVE-2025-20384 · GHSA-2x78-c45h-phqx

Unauthenticated Log Injection in Splunk Enterprise

Priority LOW 24

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Stan…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00413 Published 2025-12-03 Fixed in 10.0.1, 9.4.6 +5 CWE-117